cleanup proxy settings

This commit is contained in:
Danilo Reyes 2025-03-28 00:31:47 -06:00
parent c7beaaf8dd
commit 6519d409ad

View File

@ -78,15 +78,6 @@ in
extraConfig = ''
ssl_verify_client on;
ssl_client_certificate ${config.sops.secrets."iqQCY4iAWO-ca/pem".path};
set $client_requires_cert 1;
if ($remote_addr ~ "^10\.100\.0\.[0-9]+$") {
set $client_requires_cert 0;
}
if ($client_requires_cert = 1) {
if ($ssl_client_verify != SUCCESS) {
return 403;
}
}
error_page 403 /403.html;
'';
};